Lists (22)
AD
3 repositories
AI
12 repositories
antivirus
2 repositories
Browser Extension
1 repository
bug bounty
8 repositories
Codeql
2 repositories
credential_finder
2 repositories
eBPF
1 repository
Fuzzing
13 repositories
linux rootkit
8 repositories
mobile
2 repositories
🚀 My stack
1 repository
NFC
9 repositories
Ring -1
7 repositories
Ring3
39 repositories
RPC
1 repository
To Test
51 repositories
uefi
32 repositories
Vuln
6 repositories
Windows Kernel
30 repositories
Windows Rust
2 repositories
WSL
4 repositories
Starred repositories
A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.
Repository for information about 0-days exploited in-the-wild.
Virtual File System for Git: Enable Git at Enterprise Scale
Windows Defender Killer | Registry-Based Disablement + BYOVD Process Termination (C++)
Lightweight coding agent that runs in your terminal
woftool is a proof-of-concept utility for creating WOF-compressed files
Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...
My implementation of enSilo's Process Doppelganging (PE injection technique)
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
Source code for File Test - Interactive File System Test Tool
New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
Another Windows Local Privilege Escalation from Service Account to System
Windows Privilege Escalation from User to Domain Admin.
Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).
Abusing impersonation privileges through the "Printer Bug"
Another Windows Local Privilege Escalation from Service Account to System
A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
RottenPotato local privilege escalation from service account to SYSTEM
Windows privilege escalation through NTLM Relay and NBNS Spoofing
Automation tool for locating symbols & structs in binary (primary IDA focused)
Vulnerability analysis and proof of concepts